Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: EcltqLnUnotFP5P8Lqv4fYpt5E9zceykRJkhnc4vyGQ=
Subject key identifier: F6:56:25:DB:F4:52:00:C8:D6:FD:5D:E7:ED:04:74:75:32:8F:36:31
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 01977188DA041C0E4167A462B4A4421B688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1209
Signing time: Sun 15 Jun 2025 03:01:23 +0000
Manifest this update: Sun 15 Jun 2025 03:01:23 +0000
Manifest next update: Mon 16 Jun 2025 03:01:23 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: uil9lQaTPWUnPuUoFH+Sc7KtxJnBMfengeLfA3BzsdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:da:04:1c:0e:41:67:a4:62:b4:a4:42:1b:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jun 15 03:01:23 2025 GMT
Not After : Jun 16 03:01:23 2025 GMT
Subject: CN=f65625dbf45200c8d6fd5de7ed047475328f3631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:5d:67:d9:39:ec:37:2d:ae:8a:32:7b:ae:
f6:73:d0:df:48:13:da:ec:c7:80:dd:1a:d5:03:ac:
ca:0d:48:f9:25:28:9f:c2:5e:a0:74:dd:82:58:c5:
25:87:de:b7:7e:72:22:60:67:bb:f7:b0:8d:7d:f7:
c3:51:0d:62:58:09:3a:db:ca:f0:14:3c:6d:1e:0e:
62:4c:ca:18:1e:1c:55:31:8d:8b:48:76:57:e1:44:
1f:f8:4c:b1:e7:43:01:79:9c:fe:d0:ca:ec:f1:92:
f5:c1:a1:4e:14:02:41:e8:95:9a:23:9e:51:97:22:
51:06:a3:d9:b0:47:36:16:ea:ea:89:fb:10:4c:90:
a3:df:0a:1e:38:97:9a:48:ba:57:71:d0:58:cf:c7:
37:36:4c:6c:3c:0a:38:6c:f9:33:44:d7:a2:0e:92:
4e:cb:a1:43:50:a3:0b:a6:59:9f:19:5a:22:65:3a:
06:63:d6:07:0b:15:ec:31:ba:57:56:1a:ff:2e:7b:
bb:87:a7:d4:7a:9e:af:e9:50:fa:91:d6:08:d8:d4:
9f:cf:57:80:27:8f:26:d5:73:a1:6c:15:58:0e:6b:
63:30:2a:cc:94:f9:03:c3:34:16:9b:b4:00:71:e6:
3b:d7:3f:06:8f:f3:b9:03:03:e7:5f:9b:6f:df:02:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:25:DB:F4:52:00:C8:D6:FD:5D:E7:ED:04:74:75:32:8F:36:31
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:27:3b:16:0f:1e:96:1e:d3:b5:71:d9:14:f0:ab:6d:4b:
00:c3:9e:5c:d3:08:99:32:9a:23:30:43:25:4e:0d:cd:9b:a0:
77:0f:09:1d:5f:e0:de:25:33:c4:24:26:79:87:f7:da:2a:fb:
27:66:ec:27:b2:53:13:e8:1f:b1:d5:57:ef:e2:41:cc:c9:21:
85:2b:54:1c:84:22:0e:59:da:a6:fc:a5:15:84:62:7b:7f:77:
82:81:e6:61:d9:26:13:08:18:cd:30:52:b2:b6:92:f7:1c:3e:
9c:f7:48:04:91:be:ba:ba:d6:23:d3:b1:ff:b8:ad:32:9e:af:
a7:5a:eb:66:04:0d:fb:dd:7e:4c:4a:a7:f2:48:e0:22:8e:ea:
40:af:a1:3a:04:41:c5:68:f1:6e:b1:38:f8:bf:b8:70:c4:e3:
e9:85:91:59:0f:c2:85:62:80:66:5d:a5:b6:7c:bc:b1:c6:68:
e4:56:b2:20:43:d3:cd:d4:2d:33:66:41:65:a5:89:43:0f:99:
e9:b6:1e:f1:71:da:be:f8:4e:ca:05:6e:be:b2:45:00:84:42:
e7:39:05:28:65:66:43:52:8b:b4:c9:a5:eb:d8:dc:d5:88:08:
df:8b:02:d9:c7:c5:25:d0:06:74:a1:c6:0a:b3:ec:54:b0:f1:
7e:22:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:15:09 2025 by rpki-client